DMARCFlow vs DomainLens Pro

DMARCFlow - Professional Email Security Management for Your Domain Take full control of your email security. DMARCFlow gives IT teams, domain owners, and security professionals a clear, actionable view of who is sending email on behalf of their domains - and whether it passes authentication. FREE TOOLS - NO ACCOUNT REQUIRED Not sure if your domain is properly protected? Start with our free DNS lookup tools: • DMARC Checker – See your DMARC policy, detect misconfigurations, and get an instant security score out of 10. • SPF Checker – Validate your Sender Policy Framework record and identify issues that could allow spoofing. • DKIM Checker – Verify your DomainKeys Identified Mail signature and selector configuration. • BIMI Checker – Check whether your domain qualifies for Brand Indicators for Message Identification. Each checker delivers a color-coded security score, a full list of issues and warnings, a parsed DNS record breakdown, and an optional PDF report sent directly to your inbox. POWERFUL DASHBOARD FOR AUTHENTICATED USERS Once logged in, DMARCFlow transforms into a full monitoring and analytics platform: At a glance, see how many domains you monitor, how many have enforcement policies (quarantine or reject), how many active alerts are open, and your overall DMARC compliance rate - all updated in real time. Interactive World Map Watch email traffic flow across the globe. Every source IP is plotted on a live map with animated pins - sized by message volume and color-coded from green (passing) to red (failing). Instantly spot unexpected sending infrastructure or suspicious geographic patterns. Domain & Alignment Analytics Look into each domain's SPF and DKIM alignment rates. See the full disposition breakdown - how many messages were delivered, quarantined, or rejected - and identify your top failing sending sources in a ranked table. DMARC Aggregate Reports Browse all DMARC aggregate reports with powerful search and filtering. Filter by domain, date range, or authentication outcome. Each report shows the reporting organization, policy in effect during the period, total message volume, and pass rate. Tap any report to expand individual IP records – complete with inline maps, SPF auth results, and DKIM signature details. DESIGNED FOR CLARITY DMARCFlow is built around the idea that email security data should be understandable, not just raw. Every screen uses consistent color coding so you always know the health of your email setup at a glance. • Adaptive layout for iPhone and iPad • Full dark mode support • Skeleton loading states for smooth performance • Pull-to-refresh throughout • Advanced filters with removable chips • Paginated report lists for large datasets Whether you're hardening a single domain or managing email authentication across an entire fleet, DMARCFlow gives you the intelligence to act with confidence. Start with a free check. See everything.

DomainLens Pro is a one-tap domain reconnaissance toolkit for IT pros, security analysts, developers, and anyone responsible for a domain. Type any domain, IP, or URL and DomainLens Pro runs 24+ specialized probes in two parallel phases, then aggregates the results into a single color-graded report. Browse it across ten organized tabs: • Overview — A–F security grade with a confidence score, top remediation actions, and per-category breakdown • DNS & WHOIS — A, AAAA, MX, NS, TXT, SOA records, TTLs, registrar, expiry, name servers, registration history • Identity (RDAP) — RFC 9083 lookup, abuse contact, EPP statuses, transfer history, privacy-redaction detection • SSL / TLS — full certificate chain, validity, signature algorithm, SANs, OCSP stapling, forward secrecy, and post-quantum readiness (X25519MLKEM768 / SecP256r1MLKEM768) • Headers — HSTS preload eligibility, CSP nonce/hash analysis, X-Frame-Options, COOP, COEP, Referrer-Policy, Permissions-Policy • Email — SPF strict alignment, DKIM key strength, DMARC policy + alignment, MTA-STS, TLS-RPT, BIMI, DANE, full mail-server diagnostics • Web Stack — server fingerprint, technology detection, third-party JS / dependency inventory, JS-derived endpoint discovery • Exposure — sensitive file probes (.git, .env, robots.txt), CORS misconfigurations, dangerous HTTP methods, exposed login portals • Infrastructure — ASN, hosting provider, cloud platform (AWS/Azure/GCP/Cloudflare), CDN/WAF detection, GeoIP, anycast detection, RPKI validation, IPv4 + IPv6 reachability • Intel — DNSSEC validation, CAA records, HTTPS/SVCB records, dangling CNAME detection, zone-transfer test, Certificate Transparency subdomain enumeration, DNSBL reputation, CVE lookup against detected tech via NVD, historical drift tracking Also handles: • IPv4 / IPv6 reverse-lookup mode — paste an IP, get the domain back • Private network mode — paste an internal RFC 1918 IP and get ICMP/HTTP/HTTPS detection, OS fingerprint by TTL, ARP MAC vendor lookup, traceroute (full on Mac; iOS sandbox limits some probes) • Scan history with one-tap re-scan, offline browsing, sync across devices via Google Sign-In • Versioned scoring algorithm with confidence weighting and partial-result handling for slow targets • Post-quantum TLS twin probe to verify hybrid key-exchange support Built for security pros: • Full TLS pinning to the scan backend • No analytics, no ad SDKs, no third-party tracking • Sign-in is optional — without it, no personal data ever leaves the device• When you do sign in, choose any of: Apple, Google, Microsoft, GitHub, or a one-time email code (no passwords, ever)• Native iPhone, iPad, and Mac Catalyst layouts with platform-appropriate menus and Cmd+1–9 keyboard shortcuts on Mac No subscription. No upsell.